Privacy Policy

Last updated: June 25, 2026

1. Introduction

HEROIC.ai ("we", "our", or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our employee productivity monitoring platform and related services.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect your name, email address, company name, and authentication credentials. If you sign in via Microsoft 365 or Google, we receive your profile information from those providers.

2.2 Monitoring Data

Our desktop agent may collect, as configured by your organization's administrator:

  • Application usage data (which applications are active)
  • Website visit data (URLs visited during work hours)
  • Periodic screenshots (at intervals configured by your administrator)
  • Activity metrics (keyboard and mouse activity levels, not individual keystrokes)
  • Time tracking data (clock in/out, active/idle periods)

2.3 Device Information

We collect device identifiers, operating system type and version, and agent software version for device management purposes.

3. How We Use Your Information

We use collected information to:

  • Provide and maintain our productivity monitoring services
  • Generate productivity reports and analytics for authorized managers
  • Improve our platform and develop new features
  • Communicate with you about your account and service updates
  • Ensure the security and integrity of our platform

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Your organization's administrators and authorized managers (monitoring data)
  • Service providers who assist in operating our platform
  • Law enforcement when required by law

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security audits to protect your data.

6. Data Retention

Monitoring data is retained according to your organization's subscription plan retention period. You may request deletion of your personal data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Contact us at [email protected] to exercise these rights.

8. Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use third-party tracking cookies. Analytics cookies are only used in aggregate form to improve our service.

9. International Data Transfers

Your data may be processed in the United States. We implement appropriate safeguards to protect your data in accordance with applicable data protection laws, including GDPR where applicable.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].